Cybersecurity

Application Security
N-able Takes N-central Offline After Researcher Posts 33 Flaws
N-able pulled its hosted N-central platform offline worldwide after researcher Sean Bales published 33 alleged flaws and working exploit scripts on GitHub.
Application Security
Google Patches Chrome Zero-Day CVE-2026-125350 Under Attack
Google released Chrome 157 to fix CVE-2026-125350, an XML use-after-free it says is exploited in the wild, plus eight other flaws including a V8 type ...
Application Security
Backdoored Ethersphere bee-js and Swarm Desktop Steal Wallets
Malicious bee-js 13.3.0 and Swarm Desktop 0.56.2 releases stole Ethereum keystores and installed remote access tools, researchers at Socket and SafeDep report.
Cybersecurity
Vanderbilt Hit by BYOD Ransomware Gang Claiming 1M SSNs
Vanderbilt University confirmed an active cybersecurity incident as the BYOD ransomware group listed it on its leak site, claiming over one million SSNs.
Application Security
Web3Auth Flaw Exploited to Drain Keplr Social-Login Wallets
A Web3Auth infrastructure flaw let attackers drain Keplr wallets created with Google or Apple login; estimates put confirmed losses between $1M and $6M.
Application Security
LNbits Tells All Operators to Shut Down Amid Wallet Attacks
LNbits urged every operator to shut down servers after attackers exploited a paywall extension flaw to drain Lightning funds; BitTipBot lost 2.28M sats.
Application Security
Roundcube 1.6.21 and 1.7.6 Patch 17 Webmail Security Flaws
Roundcube released versions 1.6.21 and 1.7.6 on Monday to fix 17 webmail vulnerabilities, including injection bugs, SSRF filter bypasses and CSRF gaps.
Cybersecurity
Meloni Blames Pro-Russian Hackers for Tajani Data Leak
Italian Premier Giorgia Meloni blamed pro-Russian hackers after personal data on Foreign Minister Antonio Tajani appeared on the dark web, with payment offered.
Cybersecurity
DOJ Indicts Three Over AI Deepfake CEO Scams Costing $129M
The DOJ and FBI indicted Jacob Soall, Sharon Hazan and Guy Sheetrit for using AI to impersonate executives and attorneys in $129 million wire scams.
Application Security
Attackers Exploit SSHole OpenSSH Flaw CVE-2026-123158 on Alpine
GreyNoise and Previdian report active exploitation of the SSHole OpenSSH flaw CVE-2026-123158 on musl-based Linux, including a Python C2 tool called TAC Agent.